Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3a2f33322d3438203d3e20323733313233.roa
File:                     323830333a3435303a3a2f33322d3438203d3e20323733313233.roa (raw, json)
Hash identifier:          cvFhPD7Ts8tofOoAKITGqd/KjvguoHBwbmzJYEcyiAo=
Subject key identifier:   82:F9:96:0E:80:94:5D:A2:D8:B3:E8:C3:2D:15:E5:B0:36:A7:15:97
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       354277FA8BC62C32D10E293BA1CA9FB10F6FD767
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3a2f33322d3438203d3e20323733313233.roa
Signing time:             Tue 23 Sep 2025 19:05:00 +0000
ROA not before:           Tue 23 Sep 2025 19:00:00 +0000
ROA not after:            Tue 22 Sep 2026 19:05:00 +0000
asID:                     273123
IP address blocks:        2803:450::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Nov 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:42:77:fa:8b:c6:2c:32:d1:0e:29:3b:a1:ca:9f:b1:0f:6f:d7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Sep 23 19:00:00 2025 GMT
            Not After : Sep 22 19:05:00 2026 GMT
        Subject: CN=82F9960E80945DA2D8B3E8C32D15E5B036A71597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:17:4d:79:c4:f3:06:05:68:c6:24:0b:1c:c4:
                    a9:c9:c4:6a:92:9c:9c:b9:86:48:a9:0f:33:08:f2:
                    90:07:9d:78:4d:19:41:d6:9f:d6:dd:b6:0c:5d:67:
                    3e:99:c2:c8:dd:16:91:05:08:63:6f:b1:8a:bf:17:
                    27:05:f8:c6:4b:ef:a5:e8:7a:86:8e:f1:05:f8:0e:
                    27:8b:01:78:57:42:35:2b:a3:2b:4b:98:eb:5c:be:
                    4d:f5:95:2c:12:e0:90:5f:ef:79:12:4d:12:ec:ca:
                    7e:fb:10:62:2b:64:6a:91:b7:a3:dc:92:70:35:00:
                    9b:03:bc:f0:77:1c:dc:5f:9a:6a:8f:d1:f9:aa:91:
                    9a:62:04:92:7e:23:d2:b0:97:7f:a3:fd:a1:2f:67:
                    a0:a0:cb:bc:e0:8c:f0:26:ee:7e:e7:3c:7a:5d:24:
                    c3:5a:50:77:3d:0d:12:cf:95:1c:98:d6:27:04:5e:
                    96:33:94:65:ec:b4:10:da:74:ba:02:33:97:0e:91:
                    a3:0a:61:7c:c5:11:db:6c:74:be:11:9c:ba:e7:fa:
                    8a:2d:24:40:9c:05:29:cb:0f:4b:c7:bc:89:38:34:
                    f0:a5:85:ee:71:ed:f6:2a:74:01:2d:49:e0:bc:fb:
                    50:f0:37:88:b6:2e:5b:7c:3b:60:f7:81:27:38:65:
                    c3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F9:96:0E:80:94:5D:A2:D8:B3:E8:C3:2D:15:E5:B0:36:A7:15:97
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3a2f33322d3438203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:e2:19:c9:4c:af:e3:52:b3:e6:3f:d6:97:0b:51:1f:21:7d:
         3f:e6:c5:65:1e:21:b2:87:34:7c:1b:14:0d:2d:40:e9:e9:19:
         b0:f7:81:88:54:54:7b:0d:bc:78:05:7b:97:c1:d6:fc:89:ce:
         f6:a6:e4:1a:45:89:d0:17:80:2b:76:ef:ed:32:05:51:c1:cf:
         ea:1c:c3:29:13:26:8b:38:12:8f:81:15:e0:1f:c3:b2:c6:d7:
         06:fb:5e:d5:0f:0f:36:3b:23:a2:59:d6:44:6c:39:06:33:66:
         01:49:9a:db:c4:3e:08:90:51:08:5d:0a:4f:a3:e5:d6:18:2f:
         25:a7:39:e8:31:2b:ad:6d:7d:7a:f0:5b:78:2b:82:4a:d8:f9:
         ee:03:60:47:5b:7f:e1:32:7e:0c:df:19:9a:14:6e:83:5c:f9:
         8b:16:9a:7b:f3:df:b4:91:cc:01:71:45:b3:0d:c6:ce:65:1c:
         3f:3b:f3:27:48:9f:15:6e:da:f5:36:9f:25:da:6d:12:4e:82:
         d3:4a:96:df:d8:0c:19:1a:f0:62:d5:90:28:07:c1:1f:66:f4:
         36:15:df:e1:e7:01:25:79:ac:50:84:1d:52:de:e2:48:a9:96:
         08:bd:d8:d6:a9:a9:32:27:2c:17:aa:20:bd:e1:c8:5c:28:60:
         41:d7:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:12:19 2025 by rpki-client